fix: withAuth middleware

apps/web/app/[lng]/(dashboard)/settings/account/profile/page.tsx

@@ -199,7 +199,7 @@ const Profile = ({ params: { lng } }) => {
           {/* Delete Account Confirmation */}
           <ConfirmModal
             open={confirmDeleteAccountDialogOpen}
-            title={t("dashboard:delete_account_confirmation_title")}
+            title={t("dashboard:delete_account")}
             body={
               <Trans
                 i18nKey="dashboard:delete_account_confirmation_body"
@@ -256,7 +256,7 @@ const Profile = ({ params: { lng } }) => {
               disabled={isProfileUpdateBusy}
             >
               <Typography variant="body1" fontWeight="bold" color="inherit">
-                Delete Account
+                {t("dashboard:delete_account")}
               </Typography>
             </LoadingButton>
           </Stack>

apps/web/i18n/locales/en/dashboard.json

@@ -15,6 +15,6 @@
     "danger_zone": "Danger Zone",
     "danger_zone_description": "Delete your account with all of your personal information and data",
     "danger_zone_body": "Delete your account with all personal data. <b>This action cannot be undone!</b>",
-    "delete_account_confirmation_title": "Delete Account",
+    "delete_account": "Delete Account",
     "delete_account_confirmation_body": "<p>Before deleting your account, ensure you download any data you want to keep, and note that the following will occur:</p><ul><li>Your content data will be <strong>permanently removed</strong>.</li><li>If you co-own an organization or team with other administrators, the ownership of that team will be transferred to another admin.</li><li>In the absence of fellow administrators or if you are the sole member of a team or organization, it will undergo an <strong>irreversible deletion</strong> along with all associated data.</li><li>Remember, <strong>this action cannot be undone;</strong> once it's executed, it's done for good.</li></ul><p>Please enter <strong>{{email}}</strong> to confirm the deletion of your account.</p>"
 }

apps/web/middlewares/withAuth.ts

@@ -8,7 +8,14 @@ import {
 } from "next/server";
 import { fallbackLng, cookieName } from "@/i18n/settings";
 
-const protectedPaths = ["/home", "/projects", "datasets", "/settings", "/map", "/onboarding"];
+const protectedPaths = [
+  "/home",
+  "/projects",
+  "datasets",
+  "/settings",
+  "/map",
+  "/onboarding",
+];
 
 export const withAuth: MiddlewareFactory = (next: NextMiddleware) => {
   return async (request: NextRequest, _next: NextFetchEvent) => {
@@ -43,8 +50,7 @@ export const withAuth: MiddlewareFactory = (next: NextMiddleware) => {
       req: request,
       secret: nextAuthSecret,
     });
-
-    const isAuthorized = !!token;
+    const isAuthorized = !!token && token.error !== "RefreshAccessTokenError";
 
     // the user is authorized, let the middleware handle the rest
     if (isAuthorized) return await next(request, _next);